Privacy Policy — skylinked.in LinkedIn Automation

1. Who We Are

skylinked.in, operated by Orange Sky (“we”, “us”, “our”) operates the LinkedIn Automation service available at this website. We are based in India. For any privacy-related queries, contact us at contact@orangesky.app.

2. What Data We Collect

Account data

Name, email address, and password (hashed) when you register.
Professional details you provide: profession, persona style, image style preferences, WhatsApp number, and approval email.

LinkedIn data

When you connect your LinkedIn account via OAuth, we receive and store an encrypted access token, your LinkedIn user ID, and basic profile information (first name, last name).
We never receive or store your LinkedIn password.
We use the access token only to:
- publish posts to your own LinkedIn profile on your behalf, at the times you choose (after your approval, if you turn on post review); and
- where you grant this permission when connecting, read the performance statistics of your own posts (such as impressions, members reached, reactions, comments, reposts, saves and followers gained) so we can show them to you in your private dashboard.
We do not read your feed, messages or connections, and we do not collect data about other LinkedIn members.
LinkedIn data is shown only to you. We do not sell it, share it with other customers, or use it for advertising.

Instagram data

Connecting Instagram is optional and only works with an Instagram Business or Creator account. You sign in on Instagram’s own page; we never receive or store your Instagram password.
When you connect, we receive and store your Instagram account ID, username, account type (Business or Creator), a copy of your profile photo, and an encrypted access token.
We use them only to:
- show you which Instagram account is connected (its username and photo) in your settings; and
- publish your own posts (the image and its caption) to that Instagram account on your behalf, either on your schedule or when you press “Post to Instagram”.
After publishing we store the post’s ID and link, so we can show you that it went out.
We do not read your messages, comments, followers, insights or other people’s content, and we do not collect data about other Instagram users.
Instagram data is shown only to you. We do not sell it, share it with other customers, or use it for advertising or ad measurement.
You can remove it at any time: see Data Deletion.

Topics and content

Topics you save or generate through the platform are stored in our database.
AI-generated post content is created using OpenAI and stored for your review and approval.

Payment data

Payments are processed by Razorpay. We do not store your card number or bank details. We only store order IDs, payment status, and the post package you purchased.

Usage data

Standard server logs (IP address, browser type, pages visited) for security and debugging purposes.
How you found us: the advertising campaign or website that referred you (for example UTM tags or an ad click ID), saved with your account at signup.

3. How We Use Your Data

To provide the LinkedIn Automation service — generating and publishing posts on your behalf.
To send you post approval emails so you can review content before it goes live.
To process payments and maintain subscription records.
To improve the service and fix technical issues.
To contact you about your account (via WhatsApp or email) as part of onboarding.
To show you how your LinkedIn posts are performing, if you have granted that permission.
To publish your posts to your Instagram account, if you have connected one.
To measure which of our own advertising brings people to skylinked.in. LinkedIn and Instagram data is never used for this.

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services to operate the platform:

LinkedIn — OAuth authentication, post publishing and (with your permission) post statistics. Governed by LinkedIn’s Privacy Policy.
Instagram (Meta Platforms) — Sign-in to connect your Instagram account and publishing of your posts to it, through the Instagram API. Governed by Instagram’s Privacy Policy.
OpenAI — AI-generated post content. Governed by OpenAI’s Privacy Policy.
Razorpay — Payment processing. Governed by Razorpay’s Privacy Policy.
Hostinger — Server hosting for the application and its PostgreSQL database.
Cloudinary — Storage and delivery of post images.
n8n — Automation workflow for scheduling and publishing posts (runs on our own server).
Email delivery providers — Sending approval, account and notification emails.
Meta (Facebook) and Google — Measuring our own advertising (Meta Pixel, Google Tag Manager / Google Analytics). When you sign up, contact us or pay, we may also send Meta that event with your email address, name and phone number in hashed (scrambled) form, plus your IP address and browser type, so it can match the event to our ad. Governed by Meta’s Privacy Policy and Google’s Privacy Policy.

5. Data Security

LinkedIn and Instagram access tokens are encrypted using AES-256 before being stored in the database.
Passwords are hashed and never stored in plain text.
All data is transmitted over HTTPS.
Access to the database is restricted and not publicly exposed.

6. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., payment records).

If you disconnect Instagram, we delete its access token immediately. If you remove skylinked.in from inside Instagram and ask for your data to be deleted, we delete everything we hold from that Instagram account automatically. The steps, and a way to check on a request, are on our Data Deletion page.

7. Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Disconnect your LinkedIn or Instagram account at any time from your settings.
Withdraw consent for us to post on LinkedIn or Instagram by disconnecting that account.
Have your Instagram data deleted by removing skylinked.in from your Instagram account (see Data Deletion).

To exercise any of these rights, email us at contact@orangesky.app.

8. Cookies

We use the following cookies and similar technologies:

Essential: short-lived cookies during the LinkedIn or Instagram connection step, to verify the request and prevent CSRF attacks. They are deleted once the connection completes.
Campaign: a first-party cookie that remembers which ad or website referred you, kept for up to 90 days, so we know which of our marketing works.
Analytics and advertising: cookies set by Meta Pixel and Google Tag Manager / Google Analytics, which measure visits and whether our ads lead to signups or purchases.

You can block or delete cookies in your browser settings. Blocking analytics and advertising cookies does not affect the service.

9. Children’s Privacy

Our service is intended for professionals aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by a notice on the platform. Continued use of the service after changes constitutes your acceptance of the updated policy.

11. Contact

For any questions or requests regarding your privacy, contact us at contact@orangesky.app.